I'm trying to create GPO's who initially depend on Domain Local Group membership. Somehow this doesn't work in combination with Windows 2000 SP3. It works with Domain Global Groups, but i have to narrow it down to one Domain Local Group per GPO.
Does anybody know how to do this with WMI, e.g. how to write a WMI query to limit the activation of the GPO to just one domain local group? The GPO has default Authenticated Users assigned to it.
I'm aware of that possibility, but this is a GPO for all users if the user logging on is member of a specific group. Our domain isn't in native mode yet, so i can't put domain global groups in domain global groups. So i have to use a domain local group for the GPO, in which i can put domain global groups or users. But, the GPO only works with domain global groups If i attach authenticated users to the GPO and restrict access to that GPO via a WMI filter, it could do the trick ??
It's solved. As Masken said, WMI filtering does only work with WXP/2003 or higher. But on our test domein, we raised the domain level to 2003 native (from 2000 mixed), and then we can use Domain Local Security groups in a GPO security filter.
If i attach authenticated users to the GPO and restrict access to that GPO via a WMI filter, it could do the trick ?? 
